internal/

Package config defines the Sentinel configuration schema, default values, and the loader that merges the on-disk YAML with per-repo overrides.

Package context implements Tier 3 of the Sentinel detection pipeline: context-aware filtering that eliminates false positives by inspecting the surrounding code structure of a potential secret.

Package entropy implements Tier 2 of the Sentinel detection pipeline: Shannon entropy analysis for detecting high-randomness strings that escape pattern-based detection (e.g., raw hex or Base64-encoded secrets).

Package git provides interoperability with the local git binary: listing staged files and retrieving their diff content as it will be committed.

Package reporter handles all output rendering for the Sentinel pre-commit hook.

Package scanner orchestrates the three-tier Sentinel detection pipeline for a single staged file.

Package trie implements Tier 1 of the Sentinel detection pipeline: an Aho-Corasick automaton for ultra-fast, O(n) multi-pattern matching of known secret signatures across arbitrary byte streams.